Huidige consentrechten

Hieronder vind je een tabel met daarin de consentrechten die nodig zijn voor de SuperVision applicatie. De consentrechten zijn voor Golden Master(s) en voor klantomgevingen hetzelfde.

Claim valueTypePermission

Application.Read.All

Delegated

Read applications

DelegatedPermissionGrant.ReadWrite.All

Delegated

Manage all delegated permission grants

email

Delegated

View users' email address

offline_access

Delegated

Maintain access to data you have given it access to

openid

Delegated

Sign users in

profile

Delegated

View users' basic profile

RoleManagement.ReadWrite.Directory

Delegated

Read and write directory RBAC settings

User.Read

Delegated

Sign in and read user profile

Policy.Read.All

Delegated

Read your organization's policies

Policy.ReadWrite.DeviceConfiguration

Delegated

Read and write your organization's device configuration policies

AppRoleAssignment.ReadWrite.All

Delegated

Manage app permission grants and app role assignments

Policy.ReadWrite.ConditionalAccess

Application

Read and write your organization's conditional access policies

Policy.ReadWrite.AuthenticationMethod

Application

Read and write all authentication method policies

Device.ReadWrite.All

Application

Read and write devices

DelegatedPermissionGrant.ReadWrite.All

Application

Manage all delegated permission grants

Application.ReadWrite.All

Application

Read and write all applications

WindowsUpdates.ReadWrite.All

Application

Read and write all Windows update deployment settings

Directory.ReadWrite.All

Application

Read and write directory data

Group.ReadWrite.All

Application

Read and write all groups

User.Read.All

Application

Read all users' full profiles

Domain.Read.All

Application

Read domains

DeviceManagementServiceConfig.ReadWrite.All

Application

Read and write Microsoft Intune configuration

AppRoleAssignment.ReadWrite.All

Application

Manage app permission grants and app role assignments

DeviceManagementManagedDevices.ReadWrite.All

Application

Read and write Microsoft Intune devices

RoleManagement.ReadWrite.Directory

Application

Read and write all directory RBAC settings

Policy.Read.All

Application

Read your organization's policies

DeviceManagementConfiguration.ReadWrite.All

Application

Read and write Microsoft Intune device configuration and policies

Application.Read.All

Application

Read all applications

DeviceManagementManagedDevices.PrivilegedOperations.All

Application

Perform user-impacting remote actions on Microsoft Intune devices

DeviceManagementApps.ReadWrite.All

Application

Read and write Microsoft Intune apps

DeviceManagementRBAC.ReadWrite.All

Application

Read and write Microsoft Intune RBAC settings

Policy.ReadWrite.FeatureRollout

Application

Read and write feature rollout policies

Exchange.ManageAsApp

Application

Manage Exchange as Application

Last updated